Adding code to a post results in warning message

[bunker]

In software forum I was trying to show someone a line to make a batch file to copy files from one machine to another. It didn't look very legible in a standard post so I went to edit it to put the line in an "attach code" window. When I went to post it I got the page below.

This is what I was trying to put in the "attach code" window:

Copy c:\<yadda, yadda, yadda>\* \\<pcname>\<shared direcotry>

error page

Server Error in '/' Application.
A potentially dangerous Request.Form value was detected from the client (rawcode="copy C:\<yadda, yadda, yadda...").
Description: Request Validation has detected a potentially dangerous client input value, and processing of the request has been aborted. This value may indicate an attempt to compromise the security of your application, such as a cross-site scripting attack. You can disable request validation by setting validateRequest=false in the Page directive or in the configuration section. However, it is strongly recommended that your application explicitly check all inputs in this case.

Exception Details: System.Web.HttpRequestValidationException: A potentially dangerous Request.Form value was detected from the client (rawcode="copy C:\<yadda, yadda, yadda...").

Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace:

[HttpRequestValidationException (0x80004005): A potentially dangerous Request.Form value was detected from the client (rawcode="copy C:\<yadda, yadda, yadda...").]
System.Web.HttpRequest.ValidateString(String s, String valueName, String collectionName) +240
System.Web.HttpRequest.ValidateNameValueCollection(NameValueCollection nvc, String collectionName) +99
System.Web.HttpRequest.get_Form() +121
System.Web.UI.Page.GetCollectionBasedOnMethod() +70
System.Web.UI.Page.DeterminePostBackMode() +128
System.Web.UI.Page.ProcessRequestMain() +2112
System.Web.UI.Page.ProcessRequest() +218
System.Web.UI.Page.ProcessRequest(HttpContext context) +18
System.Web.CallHandlerExecutionStep.System.Web.HttpApplication+IExecutionStep.E
ecute() +179
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +87


Version Information: Microsoft .NET Framework Version:1.1.4322.2032; ASP.NET Version:1.1.4322.2032

 

[kamper]

I think the notice at the bottom of the page should read "FuseTalk Enterprise Edition - Perpetual Beta". Cross-site scripting attacks should be dealt with when generating pages, not when taking input.